General

  • Target

    2025-06-04_759d1b76843cbff78f9f762f33f7e2ed_elex_rhadamanthys_stop

  • Size

    1.9MB

  • Sample

    250604-2y484sel41

  • MD5

    759d1b76843cbff78f9f762f33f7e2ed

  • SHA1

    2cd44cf0c1250f52063e67c3d53f5e7592d7f4c6

  • SHA256

    279df52b1c1ac1968270b2014becd81c4accf9e0b4d2d63ea1116149b09fbca9

  • SHA512

    ef4eddb819293e493cdaf61cfc957cb015d76cf2bd2387aec095263a0837a2b7b50902e43a148d148da825eb8d3f1c1e9313cb09b64695d7ddf8d68afc59d6f2

  • SSDEEP

    49152:nJEm9mT0TsFcnjWg2B44R1gkpIwie2inyh03B:JIT04Eag2+4ck8c

Malware Config

Targets

    • Target

      2025-06-04_759d1b76843cbff78f9f762f33f7e2ed_elex_rhadamanthys_stop

    • Size

      1.9MB

    • MD5

      759d1b76843cbff78f9f762f33f7e2ed

    • SHA1

      2cd44cf0c1250f52063e67c3d53f5e7592d7f4c6

    • SHA256

      279df52b1c1ac1968270b2014becd81c4accf9e0b4d2d63ea1116149b09fbca9

    • SHA512

      ef4eddb819293e493cdaf61cfc957cb015d76cf2bd2387aec095263a0837a2b7b50902e43a148d148da825eb8d3f1c1e9313cb09b64695d7ddf8d68afc59d6f2

    • SSDEEP

      49152:nJEm9mT0TsFcnjWg2B44R1gkpIwie2inyh03B:JIT04Eag2+4ck8c

    • Ardamax

      A keylogger first seen in 2013.

    • Ardamax family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks